{"id":97203,"date":"2020-10-16T14:42:53","date_gmt":"2020-10-16T12:42:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak"},"modified":"2020-10-16T14:42:53","modified_gmt":"2020-10-16T12:42:53","slug":"kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","title":{"rendered":"Cum protej\u0103m birourile virtuale ale clien\u021bilor de viru\u0219i, spioni \u0219i atacuri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Anul acesta, multe companii s-au gr\u0103bit s\u0103 treac\u0103 la munca de la distan\u021b\u0103. Unora dintre clien\u021bi, noi <noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/digest\/150-virtualnyh-rabochih-mest-dlya-call-centra-za-nedelyu\">le-am oferit ajutor<\/a><\/noindex> pentru a organiza peste o sut\u0103 de locuri de munc\u0103 la distan\u021b\u0103 \u00eentr-o s\u0103pt\u0103m\u00e2n\u0103. A fost important s\u0103 facem acest lucru nu doar rapid, ci \u0219i \u00een siguran\u021b\u0103. Tehnologia VDI a venit \u00een ajutor: aceasta faciliteaz\u0103 distribu\u021bia politicilor de securitate pe toate locurile de munc\u0103 \u0219i protejarea \u00eempotriva scurgerilor de date.\u00a0<\/p>\n<p>\u00cen acest articol, voi explica cum func\u021bioneaz\u0103 serviciul nostru de birouri virtuale bazat pe Citrix VDI din perspectiva securit\u0103\u021bii informa\u021biei. Voi ar\u0103ta ce facem pentru a proteja birourile clien\u021bilor de amenin\u021b\u0103ri externe, cum ar fi ransomware sau atacuri specifice.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"Cum protej\u0103m birourile virtuale ale clien\u021bilor de viru\u0219i, spioni \u0219i atacuri\" src=\"\/wp-content\/uploads\/2020\/10\/bd9f5c9d944abf021f1a73351b88f49b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Ce probleme de securitate abord\u0103m\u00a0<\/h2>\n<p>\nAm identificat c\u00e2teva amenin\u021b\u0103ri principale de securitate pentru serviciu. Pe de o parte, biroul virtual risc\u0103 s\u0103 se infecteze de pe calculatorul utilizatorului. Pe de alt\u0103 parte, exist\u0103 pericolul de a ie\u0219i de pe biroul virtual \u00een vastitatea internetului \u0219i de a desc\u0103rca un fi\u0219ier infectat. Chiar dac\u0103 ar avea loc o astfel de situa\u021bie, aceasta nu ar trebui s\u0103 afecteze \u00eentreaga infrastructur\u0103. De aceea, \u00een crearea serviciului, am abordat mai multe probleme:\u00a0<\/p>\n<ul>\n<li>Protejarea \u00eentregului stand VDI de amenin\u021b\u0103rile externe.\n<\/li>\n<li>Izolarea clien\u021bilor unii de al\u021bii.\n<\/li>\n<li>Protejarea birourilor virtuale \u00eens\u0103\u0219i.\u00a0\n<\/li>\n<li>Conectarea \u00een siguran\u021b\u0103 a utilizatorilor de pe orice dispozitive.\n<\/li>\n<\/ul>\n<p>\nNucleul protec\u021biei a devenit FortiGate \u2013 un firewall de nou\u0103 genera\u021bie de la Fortinet. Acesta controleaz\u0103 traficul standului VDI, asigur\u0103 o infrastructur\u0103 izolat\u0103 pentru fiecare client \u0219i protejeaz\u0103 \u00eempotriva vulnerabilit\u0103\u021bilor de partea utilizatorului. Capacit\u0103\u021bile sale sunt suficiente pentru a rezolva cea mai mare parte a problemelor de securitate informa\u021bional\u0103.\u00a0<\/p>\n<p>Dar, dac\u0103 compania are cerin\u021be speciale de securitate, oferim oportunit\u0103\u021bi suplimentare:\u00a0<\/p>\n<ul>\n<li>Organiz\u0103m o conexiune securizat\u0103 pentru a lucra de pe calculatoarele de acas\u0103.\n<\/li>\n<li>Oferim acces pentru analiza automat\u0103 a jurnalelor de securitate.\n<\/li>\n<li>Oferim gestionarea protec\u021biei antivirus pe birouri.\n<\/li>\n<li>Protej\u0103m \u00eempotriva vulnerabilit\u0103\u021bilor de tip \u201ezero-day\u201d.\u00a0\n<\/li>\n<li>Configur\u0103m autentificarea multifactor pentru o protec\u021bie suplimentar\u0103 \u00eempotriva conect\u0103rii neautorizate.<\/li>\n<\/ul>\n<p>\nVoi detalia cum am rezolvat problemele.\u00a0<\/p>\n<h2>Cum protej\u0103m standul \u0219i asigur\u0103m securitatea re\u021belei<\/h2>\n<p>\n<b>Segment\u0103m partea de re\u021bea.<\/b> La stand, eviden\u021biem un segment de management \u00eenchis pentru gestionarea tuturor resurselor. Segmentul de management nu este accesibil din exterior: \u00een cazul unui atac asupra clientului, r\u0103uf\u0103c\u0103torii nu vor putea p\u0103trunde acolo.\u00a0<\/p>\n<p>Protec\u021bia este asigurat\u0103 de FortiGate. Acesta combin\u0103 func\u021bii de antivirus, firewall \u0219i sistem de prevenire a intruziunilor (intrusion prevention system, IPS).\u00a0<\/p>\n<p>Pentru fiecare client, cre\u0103m un segment de re\u021bea izolat pentru birourile virtuale. Pentru aceasta, FortiGate dispune de tehnologia domeniilor virtuale, sau VDOM. Aceasta permite \u00eemp\u0103r\u021birea firewall-ului \u00een mai multe entit\u0103\u021bi virtuale \u0219i alocarea unui VDOM fiec\u0103rui client, care se comport\u0103 ca un firewall distinct. De asemenea, cre\u0103m un VDOM separat pentru segmentul de management. <\/p>\n<p>Iat\u0103 schema rezultat\u0103:<br \/>\n<img decoding=\"async\" alt=\"Cum protej\u0103m birourile virtuale ale clien\u021bilor de viru\u0219i, spioni \u0219i atacuri\" src=\"\/wp-content\/uploads\/2020\/10\/24d9f6fc2b50079e7d6eb60bc19429a4.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00centre clien\u021bi nu exist\u0103 conectivitate de re\u021bea: fiecare tr\u0103ie\u0219te \u00een propriul s\u0103u VDOM \u0219i nu influen\u021beaz\u0103 pe altul. F\u0103r\u0103 aceast\u0103 tehnologie, ar fi trebuit s\u0103 separ\u0103m clien\u021bii prin reguli ale firewall-ului, ceea ce este riscant din cauza factorului uman. Aceste reguli pot fi comparate cu o u\u0219\u0103 pe care trebuie s\u0103 o \u00eenchizi constant. \u00cen cazul VDOM-ului, nu l\u0103s\u0103m deloc \u201eu\u0219i\u201d deschise.\u00a0<\/p>\n<p>\u00centr-un VDOM separat, clientul are adresare \u0219i rutare proprii. Prin urmare, suprapunerile de intervale nu devin o problem\u0103 pentru companie. Clientul poate aloca IP-urile necesare birourilor virtuale. Acest lucru este convenabil pentru companiile mari, care au propriile planuri IP.\u00a0<\/p>\n<p><b>Rezolv\u0103m problemele de conectivitate cu re\u021beaua corporativ\u0103 a clientului.<\/b> O alt\u0103 provocare este integrarea VDI cu infrastructura clientului. Dac\u0103 compania \u00ee\u0219i p\u0103streaz\u0103 sistemele corporative \u00een centrul nostru de date, putem pur \u0219i simplu trasa un cablu de re\u021bea de pe echipamentul s\u0103u la firewall. Dar de multe ori avem de-a face cu un amplasament extern - un alt centru de date sau biroul clientului. \u00cen acest caz, g\u00e2ndim un schimb sigur cu amplasamentul \u0219i construim un VPN site-to-site folosind IPsec VPN.\u00a0<\/p>\n<p>Schemele pot fi diferite, \u00een func\u021bie de complexitatea infrastructurii. \u00cen unele locuri, este suficient s\u0103 conectezi la VDI o singur\u0103 re\u021bea de birou \u2013 acolo este suficient un rutare static\u0103. \u00cen companiile mari, exist\u0103 multe re\u021bele care se schimb\u0103 constant; aici clientul are nevoie de rutare dinamic\u0103. Folosim diferite protocoale: au existat deja cazuri cu OSPF (Open Shortest Path First), tuneluri GRE (Generic Routing Encapsulation) \u0219i BGP (Border Gateway Protocol). FortiGate suport\u0103 protocoale de re\u021bea \u00een VDOM-uri separate, f\u0103r\u0103 a afecta al\u021bi clien\u021bi.\u00a0<\/p>\n<p>Se poate construi \u0219i un VPN GOST \u2013 criptare bazat\u0103 pe mijloacele de criptare certificate de FSB-ul Rusiei. De exemplu, folosind solu\u021bii de clas\u0103 CS1 \u00een medii virtuale precum \u201eS-Terra virtual gateway\u201d sau PAK ViPNet, APK\u0218 \u201eContinent\u201d, \u201eS-Terra\u201d.<\/p>\n<p><b>Configur\u0103m Politicile de Grup.<\/b> Coordon\u0103m cu clientul politicile de grup care se aplic\u0103 pe VDI. Aici principiile de configurare nu difer\u0103 de cele ale politicilor din birou. Configur\u0103m integrarea cu Active Directory \u0219i deleg\u0103m clien\u021bilor gestionarea unor politici de grup. Administratorii clientului pot aplica politici pe obiectul Computer, gestiona unitatea organiza\u021bional\u0103 din Active Directory \u0219i crea utilizatori.\u00a0<\/p>\n<p>Pe FortiGate, pentru fiecare VDOM al clientului, scriem o politic\u0103 de securitate a re\u021belei, stabilim restric\u021bii de acces \u0219i configur\u0103m verificarea traficului. Folosim mai multe module FortiGate:\u00a0<\/p>\n<ul>\n<li>modulul IPS verific\u0103 traficul pentru malware \u0219i previne intruziuni;<\/li>\n<li>antivirusul protejeaz\u0103 computerele de malware \u0219i spyware;<\/li>\n<li>filtrarea web blocheaz\u0103 accesul la resursele nesigure \u0219i site-urile cu con\u021binut d\u0103un\u0103tor sau inacceptabil;<\/li>\n<li>set\u0103rile firewall-ului pot permite utilizatorilor s\u0103 acceseze internetul doar pe anumite site-uri.\u00a0<\/li>\n<\/ul>\n<p>\nUneori clientul dore\u0219te s\u0103 gestioneze singur accesul angaja\u021bilor la site-uri. De obicei, astfel de cereri vin din partea b\u0103ncilor: serviciile de securitate cer ca controlul accesului s\u0103 r\u0103m\u00e2n\u0103 \u00een partea companiei. Aceste companii monitorizeaz\u0103 singure traficul \u0219i fac modific\u0103ri regulate ale politicilor. \u00cen acest caz, tot traficul din FortiGate este direc\u021bionat c\u0103tre client. Pentru aceasta, folosim o interfa\u021b\u0103 configurat\u0103 cu infrastructura companiei. Dup\u0103 aceea, clientul configureaz\u0103 singur regulile de acces la re\u021beaua corporativ\u0103 \u0219i internet.\u00a0<\/p>\n<p><b>Monitoriz\u0103m evenimentele de la stand.<\/b> \u00cempreun\u0103 cu FortiGate, folosim FortiAnalyzer \u2013 un colector de loguri de la Fortinet. Cu ajutorul acestuia, vizualiz\u0103m toate jurnalele de evenimente pe VDI \u00eentr-un singur loc, identific\u0103m ac\u021biuni suspecte \u0219i urm\u0103rim corela\u021biile.\u00a0<\/p>\n<p>Unul dintre clien\u021bii no\u0219tri utilizeaz\u0103 produsele Fortinet \u00een biroul s\u0103u. Am configurat exportul jurnalelor pentru el \u2013 astfel, clientul a putut analiza toate evenimentele de securitate pentru ma\u0219inile de birou \u0219i birourile virtuale.<\/p>\n<h2>Cum protej\u0103m birourile virtuale<\/h2>\n<p>\n<b>\u00cempotriva amenin\u021b\u0103rilor cunoscute.<\/b> Dac\u0103 clientul dore\u0219te s\u0103 gestioneze singur protec\u021bia antivirus, instal\u0103m suplimentar Kaspersky Security pentru medii virtuale.\u00a0<\/p>\n<p>Aceast\u0103 solu\u021bie func\u021bioneaz\u0103 bine \u00een cloud. To\u021bi suntem obi\u0219nui\u021bi cu idea c\u0103 antivirusul clasic Kaspersky este o solu\u021bie \u201egreu de utilizat\u201d. Spre deosebire de acesta, Kaspersky Security pentru medii virtuale nu suprasolicit\u0103 ma\u0219inile virtuale. Toate bazele de viru\u0219i se afl\u0103 pe server, care emite verdict pentru toate ma\u0219inile virtuale din nod. Pe biroul virtual este instalat doar un agent u\u0219or. Acesta trimite fi\u0219ierele pentru verificare pe server.\u00a0<\/p>\n<p>Aceast\u0103 arhitectur\u0103 asigur\u0103 \u00een acela\u0219i timp protec\u021bia fi\u0219ierelor, protec\u021bia internetului, protec\u021bia \u00eempotriva atacurilor \u0219i nu reduce performan\u021ba ma\u0219inilor virtuale. \u00cen plus, clientul poate introduce singur excep\u021bii \u00een protec\u021bia fi\u0219ierelor. Ajut\u0103m cu configurarea de baz\u0103 a solu\u021biei. Vom povesti despre tr\u0103s\u0103turile acesteia \u00eentr-un articol separat.<\/p>\n<p><b>\u00cempotriva amenin\u021b\u0103rilor necunoscute.<\/b> Pentru aceasta, conect\u0103m FortiSandbox \u2013 \u201esandbox-ul\u201d de la Fortinet. O utiliz\u0103m ca filtrul \u00een caz c\u0103 antivirusul ar l\u0103sa s\u0103 treac\u0103 o amenin\u021bare de tip \u201ezero-day\u201d. Dup\u0103 desc\u0103rcarea fi\u0219ierului, \u00eel verific\u0103m \u00eent\u00e2i cu antivirusul, apoi \u00eel trimitem \u00een \u201esandbox\u201d. FortiSandbox emuleaz\u0103 o ma\u0219in\u0103 virtual\u0103, ruleaz\u0103 fi\u0219ierul \u0219i observ\u0103 comportamentul acestuia: la ce obiecte din registru acceseaz\u0103, trimite cereri externe \u0219i a\u0219a mai departe. Dac\u0103 fi\u0219ierul se comport\u0103 suspect, ma\u0219ina virtual\u0103 din sandbox este \u0219tears\u0103 \u0219i fi\u0219ierul d\u0103un\u0103tor nu ajunge pe VDI-ul utilizatorului.\u00a0<\/p>\n<h2>Cum configur\u0103m o conexiune sigur\u0103 la VDI<\/h2>\n<p>\n<b>Verific\u0103m conformitatea dispozitivului cu cerin\u021bele de securitate.<\/b> De la \u00eenceputul muncii la distan\u021b\u0103, clien\u021bii ne-au solicitat: s\u0103 asigur\u0103m o munc\u0103 sigur\u0103 a utilizatorilor de pe computerele lor personale. Orice specialist \u00een securitate cunoa\u0219te c\u0103 protejarea dispozitivelor de acas\u0103 este dificil\u0103: nu se pot instala antivirusurile necesare sau aplica politici de grup, deoarece nu este echipament de birou.\u00a0<\/p>\n<p>\u00cen mod implicit, VDI devine un 'strat' sigur \u00eentre dispozitivul personal \u0219i re\u021beaua corporativ\u0103. Pentru a proteja VDI de atacuri din partea ma\u015finii utilizatorului, dezactiv\u0103m clipboard-ul \u0219i interzicem devierea USB-ului. Dar acest lucru nu face dispozitivul utilizatorului \u00een sine sigur.\u00a0<\/p>\n<p>Rezolv\u0103m problema cu ajutorul FortiClient. Acesta este un instrument pentru protec\u021bia endpoint-urilor. Utilizatorii companiei instaleaz\u0103 FortiClient pe computerele lor de acas\u0103 \u0219i, cu ajutorul acestuia, se conecteaz\u0103 la biroul virtual. FortiClient rezolv\u0103 imediat 3 probleme:\u00a0<\/p>\n<ul>\n<li>devine un 'singur punct de acces' pentru utilizator;\n<\/li>\n<li>verific\u0103 dac\u0103 pe computerul personal este instalat un antivirus \u0219i dac\u0103 exist\u0103 cele mai recente actualiz\u0103ri ale sistemului de operare;\u00a0\n<\/li>\n<li>stabile\u0219te un tunel VPN pentru un acces sigur.\u00a0<\/li>\n<\/ul>\n<p>\nAngajatul ob\u021bine acces numai dac\u0103 trece prin verificare. \u00cen acela\u0219i timp, birourile virtuale nu sunt accesibile din internet, ceea ce \u00eenseamn\u0103 c\u0103 sunt mai bine protejate \u00eempotriva atacurilor.\u00a0<\/p>\n<p>Dac\u0103 compania dore\u0219te s\u0103 gestioneze singur\u0103 protec\u021bia endpoint-urilor, oferim FortiClient EMS (Endpoint Management Server). Clientul poate configura scanarea birourilor \u0219i prevenirea intruziunilor, form\u00e2nd o list\u0103 alb\u0103 de adrese.\u00a0<\/p>\n<p><b>Ad\u0103ug\u0103m factori de autentificare.<\/b> \u00cen mod implicit, utilizatorii se autentific\u0103 prin Citrix netscaler. Aici putem, de asemenea, s\u0103 \u00eent\u0103rim securitatea cu ajutorul autentific\u0103rii multifactor pe baza produselor SafeNet. Aceast\u0103 tem\u0103 merit\u0103 o aten\u021bie separat\u0103, despre aceasta vom vorbi \u0219i \u00eentr-un articol separat.\u00a0<\/p>\n<p>Am acumulat o astfel de experien\u021b\u0103 de lucru cu diferite solu\u021bii \u00een ultimul an. Serviciul VDI este configurat separat pentru fiecare client, a\u0219a c\u0103 am ales instrumente c\u00e2t mai flexibile. Este posibil ca \u00een cur\u00e2nd s\u0103 ad\u0103ug\u0103m ceva nou \u0219i s\u0103 \u00eemp\u0103rt\u0103\u0219im experien\u021ba.<\/p>\n<p>Pe 7 octombrie, la ora 17:00, colegii mei vor vorbi despre birourile virtuale \u00een cadrul webinarului 'Este necesar VDI sau cum s\u0103 organiz\u0103m munca la distan\u021b\u0103?' <br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/uni.dtln.ru\/courses\/oblaka\/vdi-kak-izvlech-iz-tehnologii-maksimum?utm_source=habr&amp;utm_medium=internal&amp;utm_campaign=webinar\">\u00cenregistra\u021bi-v\u0103<\/a><\/noindex>, dac\u0103 dori\u021bi s\u0103 discut\u0103m c\u00e2nd ar fi potrivit\u0103 tehnologia VDI pentru companie \u0219i c\u00e2nd ar fi mai bine s\u0103 folosim alte metode.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/520452\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043c\u044b \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043e\u0442\u043d\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043c\u0435\u0441\u0442 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e. \u0411\u044b\u043b\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e. \u041d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u043f\u0440\u0438\u0448\u043b\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f VDI: \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043c\u0435\u0441\u0442\u0430 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445.\u00a0 \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97203","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T12:42:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum ne protej\u0103m birourile virtuale ale clien\u021bilor de viru\u0219i, spioni \u0219i atacuri | ProHoster","description":"Anul acesta, multe companii s-au gr\u0103bit s\u0103 treac\u0103 la munca de la distan\u021b\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u043e\u043b\u044b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442 \u0432\u0438\u0440\u0443\u0441\u043e\u0432, \u0448\u043f\u0438\u043e\u043d\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u0412 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-my-zashhishhaem-virtualnye-rabochie-stoly-klientov-ot-virusov-shpionov-i-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T12:42:53+00:00","article:modified_time":"2020-10-16T12:42:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97203","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:25:23","updated":"2022-09-28 06:23:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97203","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=97203"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/97203\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/97204"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=97203"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=97203"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=97203"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}